Sensitive Data Classification

Abstract

A gateway device includes a network interface connected to data sources, and computer instructions, that when executed cause a processor to access data portions from the data sources. The processor accesses classification rules, which are configured to classify a data portion of the plurality of data portions as sensitive data in response to the data portion satisfying the rule. Each rule is associated with a significance factor representative of an accuracy of the classification rule. The processor applies each of the set of classification rules to a data portion to obtain an output of whether the data is sensitive data. The output are weighed by significance factors to produce a set of weighted outputs. The processor determines if the data portion is sensitive data by aggregating the set of weighted outputs, and presents the determination in a user interface. Security operations may also be performed on the data portion.

Description

CROSS REFERENCE TO RELATED APPLICATIONS[0001]This application claims the benefit of U.S. Provisional Application No. 62 / 458,143, filed Feb. 13, 2017, which is incorporated by reference in its entirety.BACKGROUND1. Field of Art[0002]The disclosure generally relates to the field of data protection, and more particularly to a method of automatically classifying information into different levels of sensitive data and automatically performing actions based on the level of sensitivity and reporting actions to a user in a user interface.2. DESCRIPTION OF THE RELATED ART[0003]With the increasing reliance upon online, paperless transactions, sensitive information of users, such as social security numbers, addresses, payment information, and so on, is more and more commonly stored in online databases, and in more locations than before. This creates a wider attack surface for malicious entities to attempt to gain access to such sensitive information. Furthermore, as this sensitive information ...

AI Technical Summary

Benefits of technology

The patent describes a system and method for automatically identifying and protecting sensitive data in organizations. The system can automatically scan for sensitive data from multiple data sources and intelligently determine which parts of the data sources contain sensitive data. It can then perform corrective actions on such data to ensure it adheres to prescribed security protocols. The system can also provide a user interface for users to easily discover and modify sensitive data. The technical effect of this patent is to provide a more efficient and effective way to protect sensitive data in organizations, as it automates the process of identifying and securing sensitive data, and requires less human effort and oversights.

Problems solved by technology

Furthermore, as this sensitive information is propagated to more and more online repositories, it becomes difficult for an admin to keep track of where such data is being stored in a system.

Due to human error or the complexity of a system, sensitive information may be stored in unexpected locations.

For example, a user may have inadvertently kept a backup of customer data in a local storage location on a client machine.

This is a tedious procedure that can easily result in oversights and may itself create more problems as the user may have to transfer sensitive data across data sources when securing the data.

Furthermore, this tedious procedure of manually discovering sensitive data in electronic systems cannot scale and compete with the pace of data growth and distribution.

Images